A858DE45F56D9BC9 archive

201206290022 vsb2u

explained decrypted filler

3DES(name) ECB, 26 GUIDs, seed 818

Metadata

Post ID
vsb2u
Title
201206290022 → 2012-06-29 00:22 on A858's clock
Posted (UTC)
2012-06-29 07:20:43
Timezone
UTC−7 · title 00:22 against posted 07:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(818).Next(9) ✓ verified
Run
vsb-burst (short)
Draw
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: short

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b3c8a31a-da52-015a-aef3-a24cf777e0d0
  2 ce7f43e3-de3f-70d2-aaed-b2aa6d16f837
  3 951a6066-0475-480c-8013-96a24ee533fc
  4 dc0b59af-ecbd-1bea-956f-3d3f188336bc
  5 cd450656-00b5-45d5-ab0e-d3e3c04e9fa6
  6 56174dfe-42df-3782-83b3-3567595159f8
  7 07dfdc08-005a-3df9-9e95-fccee266e6e0
  8 a8df52b3-a0e2-7550-b8bc-74f3ec02cd6e
  9 a5adf810-77e9-1e6d-8708-d5dcf18e7046
 10 071ab367-5ad1-8fcb-a199-c3ae039ac21a
 11 0508e8e1-7cc3-87fe-9cc8-9813bc1f1422
 12 7342900b-85d5-028c-9256-710ba21432ff
 13 b1c79dac-d8c5-848f-b0b4-2b358bbc2554
 14 e8aefb0c-0b41-0314-901b-283ae67ff6f9
 15 755e4868-4842-56bd-9b9a-c64a9942c6a4
 16 dbcd91d7-ff0c-7cc0-b9e6-3d5560e77a22
 17 17ec1780-fe6f-6dcd-836d-61a45739595f
 18 d6b21446-1861-1fcc-9eff-f8559be0a2bb
 19 a1c4e39e-bcf8-7f9a-8bd1-ed608a43e507
 20 f9833150-c6c9-0b29-a442-6a3061abbe64
 21 5e31b97b-c802-41f5-8341-3a64159f27b0
 22 722b9ff7-558f-4aeb-b535-d875f8bdbc2b
 23 6299077f-05cd-2195-9060-a29addf1f675
 24 1a345a30-d2e7-766c-bc11-287ca7876b08
 25 e3911e06-fb30-78a7-ab82-5045d05e8d7c
 26 6bab32f7-bf90-5a88-8c25-4251ed99fd3c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 07414337188080576170442775. Exactly this sequence comes out of new Random(818).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in vsb-burst: 3 posts inside the run-9 burst (07:19-07:23) not in its stream; a second instance in the burst, too short
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results